Static task
static1
Behavioral task
behavioral1
Sample
05b8e35f70d93751bc78bffc6fa0956a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05b8e35f70d93751bc78bffc6fa0956a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
05b8e35f70d93751bc78bffc6fa0956a_JaffaCakes118
-
Size
637KB
-
MD5
05b8e35f70d93751bc78bffc6fa0956a
-
SHA1
f46153a5163caac1aca0148367ddcae188293b33
-
SHA256
b6f4aca5ebfc74eae4093533a7f78c0be5be36b346ec275737f34299cf781a4e
-
SHA512
83393c52748d40888c682070e2e4e7f5a09ea06d31b8a2cbf4c760ad016494e195f8a0e283bc794ca8d36875e32fd25fd2bfa204b3aa5df3c4877bb97cec66ff
-
SSDEEP
12288:nhe1YSDsvwOzX+rst7Xx2ipXi7bK6fGH4MutewcW2tlgUXrg/snej0LEusW:hnYZfF+y8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b8e35f70d93751bc78bffc6fa0956a_JaffaCakes118
Files
-
05b8e35f70d93751bc78bffc6fa0956a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ